supabase / cli / 29841373425
65%
develop: 65%

LAST BUILD BRANCH: pamela/growth-958-cli-surface-entitlement-upgrade-hint-from
DEFAULT BRANCH: develop
Ran
Jobs 1
Files 230
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 65.301%. Remained the same
29841373425

push

github

web-flow 
chore(deps): align pnpm minimumReleaseAge with dependency firewall (#5919)

## Summary

The release pipeline's `pnpm install --frozen-lockfile` was failing with
`ERR_PNPM_FETCH_451`. The Dependency Firewall
(`firewall.depthfirst.com`) quarantines newly published package versions
for **7 days** and returns HTTP 451 "Unavailable For Legal Reasons" for
them.

With `minimumReleaseAge: 0`, pnpm applied no cooldown of its own, so
Dependabot bumps pinned the lockfile to versions younger than the
firewall's window (e.g. `knip@6.27.0`, `lucide-react@1.25.0`,
`@swc-node/register@1.12.0`, `@posthog/core@1.43.1`), which the firewall
then refused to serve — breaking the install.

This sets `minimumReleaseAge` to **10200 minutes** (7 days + a 2-hour
buffer; the setting is in minutes) so pnpm only ever resolves versions
old enough for the firewall to serve, keeping pnpm's floor in lockstep
with the firewall. The lockfile is re-resolved onto firewall-approved
versions (`knip@6.26.0`, `lucide-react@1.24.0`,
`@swc-node/register@1.11.1`, `@posthog/core@1.40.2`, …).

The buffer was kept at exactly 2 hours rather than a larger margin on
purpose: a value *stricter* than the firewall would reject exact-pinned
bleeding-edge previews (e.g. `next@16.3.0-preview.6` in `apps/docs`)
that the firewall itself would still serve.

## Linked issue

Closes #

- [ ] The linked issue is **open** and carries the
`open-for-contribution` label (or I'm a Supabase maintainer).

## Checklist

- [ ] The PR title follows [Conventional
Commits](https://www.conventionalcommits.org/) (e.g. `fix(cli): …`).
- [ ] Tests added or updated for the change.
- [ ] `pnpm check:all` and `pnpm test` pass for the workspace(s) I
touched.

https://claude.ai/code/session_019Qp5ihFoD67CTcAAEr5js7

Co-authored-by: Claude <noreply@anthropic.com>

11250 of 17228 relevant lines covered (65.3%)

10.51 hits per line

Jobs
ID Job ID Ran Files Coverage
1 29841373425.1 230
65.3
 GitHub Action Run
Source Files on build 29841373425